4404 Founders·Oct 27Tailworm: Eleven Tailscale Flaws and the Year of RootTailscale patched five security bugs in SSH and Serve between June and July 2026. On 25 October, a researcher dropped eleven more. Erica Windisch of Cyberdione Labs published a report called Tailworm11 min read·404-founders.com
YYogeshwar Peela·Oct 7TryHackMe - SeaSurfer writeupComplete Sea Surfer TryHackMe writeup covering vhost enumeration, SSRF, LFI, WordPress RCE, tar wildcard injection, and SSH agent privilege escalation15 min read·exploitnotes.hashnode.dev
VVũ Nhật Lâm·Oct 6MikroTrick: Two SSH Bugs Chained into Passwordless Admin on RouterOSSummary MikroTrick is CERT Polska's name for a two-vulnerability chain in RouterOS that gives an attacker full access to the administrative console with no password and no SSH key. Two things make thi9 min read·blog.fiscybersec.com
KK4M1_n0_73·Oct 5DC-1: Drupalgeddon2, SUID binary to root shellFull DC-1 walkthrough: Drupal exploitation, a misleading password hint, brute forcing SSH, and a SUID find binary for root access.15 min read·0xk4m1.hashnode.dev
YYogeshwar Peela·Sep 28TryHackMe: Binary Heaven - WriteupTryHackMe Binary Heaven walkthrough: Ghidra,GDB, reverse engineering, ret2libc, SUID exploitation, PATH hijacking, and Linux privilege escalation tips8 min read·exploitnotes.hashnode.dev
JJebitok·Sep 22Challenge: Brr (TryHackMe)Link to the challenge on TryHackMe: Brr The cold never lies, but the SCADA panel guarding it just handed you the keys. Chase the chill all the way down. Note: The VM takes about 3 minutes to boot up9 min read·sharonjebitok.com
YYogeshwar Peela·Sep 22TryHackMe: Python Playground WriteupPython Playground TryHackMe writeup covering Python sandbox bypass, RCE, credential recovery, Docker container escape, and SUID privilege escalation.8 min read·exploitnotes.hashnode.dev
JJebitok·Sep 22Challenge: Operation Coldstart (TryHackMe)Link to the challenge on TryHackMe: Operation Coldstart Volt Labs, a small SaaS shop, suspects an old staging server has rotted into an exposed liability. Mara has assigned you the engagement. Find y7 min read·sharonjebitok.com
YYogeshwar Peela·Sep 10TryHackMe - Olympus WriteupOlympus TryHackMe writeup covering Victor CMS SQL injection, credential cracking, file upload RCE, SUID abuse, SSH access, and root shell.10 min read·exploitnotes.hashnode.dev
JJebitok·Sep 9Linux Privilege Escalation: AutomationLink to the challenge on TryHackMe: Linux Privilege Escalation: Automation Introduction Automation earns its keep in privilege escalation the moment you stop treating it as a replacement for manual en13 min read·sharonjebitok.com
